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WHAT IS CLAIMED IS: 

1 . A quantitative competition method in which the minimum one V MIN 
of all users' intended values V V j selected from among M monotone increasing 
values V w , where w=l,2,. . M, in the range of predetermined lower-limit and 
upper-limit values Vi and V M and only a user j having selected said minimum 
value Wmin as his intended value are specified by a plurality of user 
apparatuses i, where i=l , . . . , N, said N being an integer equal to or larger than 
2, first and second quantitative competition apparatuses, and a bulletin board 
apparatus that makes public information received from said plurality of user 
apparatuses and said first and second quantitative competition apparatuses, 
said method comprising: 

Step (a) wherein each of said user apparatuses i: responds to said 
intended value V vi input from one of said all users to generate two M-element 
sequences of information s\ and ti whose corresponding elements equal at 
values in the range from said lower-limit value Vi or larger to said intended 
value V V i or smaller and differ at values in the range from said intended value 
V vi or larger to said upper-limit value V M or smaller; and secretly sends 
information about said two M-element sequences of information Sj and ti to 
said first and second quantitative competition apparatuses, respectively, said 
M representing the number of values selectable as said intended values in the 
range from said lower-limit value Vi or larger to said upper-limit value V M or 
smaller; 

Step (b) wherein said first quantitative competition apparatus: extracts, 
for a given value V w equal to or larger than said lower-limit value Vi and 
equal to or smaller than said upper-limit value, those elements Si jW of said 
M-element sequences of information si sent from said all user apparatuses 
which correspond to w; and generates an element concatenation 
Seq s?w =Si >w ||s2,wi|.- -||sn,w m which said extracted elements s i?w are arranged in a 
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predetermined order, said || representing the concatenation of data; 

Step (c) wherein said second quantitative competition apparatus: 
extracts, for said given value V w , those elements t ijW of said M-element 
sequences of information tj sent from said all user apparatuses which 
5 correspond to said value w; and generates an element concatenation 

Seq t)W =ti, w ||t 2 , w ||...||t N;W in which said extracted elements t i;W are arranged in a 
predetermined order; 

h= Step (d) wherein said bulletin board apparatus: compares said element 

S concatenations Seq s , w and Seqt, w without revealing their values; decides the 
S 10 presence or absence of a user having selected his intended value equal to or 
% smaller than said value V w , depending on whether said concatenations Seq s , w 

and Seqt, w differ or equal; determines the minimum intended value V M in by 
q changing said value w based on said decision and makes the value MTN 
jT! public; and 

O 15 Step (e) wherein said first and second quantitative competition 

apparatuses send element concatenations Seq S)M m and Seq^MiN, respectively, to 
said bulletin board apparatus to make them public, whereby allowing each 
user to identify user j who committed the minimum intended value V M in by 
finding j which satisfies s j)M iN*tj,MiN of the corresponding elements in said 
20 element concatenations Seq s> MiN and Seq t) MiN- 
2. The method of claim 1, wherein: 

said Step (a) includes: a step wherein said user apparatus of said each 
user i generates random numbers Rli and R2 ; secretly send a pair of 
information (Rli, S;) to said first quantitative competition apparatus and a pair 
25 of information (R2 i5 tj) to said second quantitative competition apparatus; and 
a step wherein said user apparatus calculates hash values Hli=h(Rli||si) and 
H2i=h(R2i||ti) of concatenations Rl^Sj and R2i||tj of said pairs of information 
(Rli, Si) and (R2 i? t 5 ) by a hash function h, and sends said hash values HI* and 
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H2j to said bulletin board apparatus; and 

said Step (d) includes a step wherein said bulletin board apparatus 
makes public said hash values HI j and H2 i5 where i=l,2, . . ., N, as 
commitments of said all users. 

3. The method of claim 2, wherein: 

said Step (b) includes a step wherein said first quantitative competition 
apparatus: calculates a hash value HS w =h(Seq s , w ) of said element 
concatenation Seq SjW by said hash function h; and sends said hash value HS W 
to said bulletin board apparatus; 

said Step (c) includes a step wherein said second quantitative 
competition apparatus: calculates a hash value HT w =h(Seq t , w ) of said element 
concatenation Seq tjW by said hash function h; and sends said hash value HT W 
to said bulletin board apparatus; and 

said Step (d) includes a step wherein said bulletin board apparatus: 
makes public and compares said hash values HS W and HT W received from said 
first and second quantitative competition apparatuses; decides the presence or 
absence of a user having selected his intended value equal to or smaller than 
said value V w , depending on whether said hash values HS W and HT W differ or 
equal; and determines said minimum intended value V M in by changing said 
value w based on said decision. 

4. The method of claim 2, wherein: 

said first and second quantitative competition apparatuses have stored 
therein a prime P made public previously by said bulletin board apparatus, 
said prime P being a prime such that P-l has a large prime as its divisor, and 
said first and second quantitative competition apparatuses having selected a 
common integral value w; 

said Step (b) includes a step wherein said first quantitative competition 
apparatus: calculates a hash value HS w =h'(Seq SjW ) of said element 
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concatenation Seq s>w by a hash function h' that maps an arbitrary integer over 
a finite field uniquely and randomly; generates a random number RA W ; 
calculates a hash value HA w =h(RA w ||HS w ) of a concatenation RA W ||HS W by 
said hash function h; calculates HS w RAw (mod P); and sends a pair (HA W? 
5 HS/^mod P)) of said hash value HA W and said value HS/^Cmod P) to 
said bulletin board apparatus; 

said Step (c) includes a step wherein said second quantitative 
_ competition apparatus: calculates a hash value HT w =h'(Seq tjW ) of said element 
y concatenation Seq tjW by a hash function h'; generates a random number RB W ; 
^10 calculates a hash value HB^h^RB w j |HT W ) of a concatenation RB W | |HT W by 
ill said hash function h; calculates HTw^^mod P); and sends a pair (HB W , 
5 HTw^Cmod P)) of said hash value HB W and said value HT/^Cmod P) to 
O said bulletin board apparatus; and 

U said Step (d) includes: a step wherein said first quantitative 

]5. 15 competition apparatus reads said HT w RBw (mod P) from said bulletin board 
' M apparatus, and calculates and sends (HT w RBw ) RAw (mod P) to said bulletin 
board apparatus; a step wherein said second quantitative competition 
apparatus reads said HS w RAw (mod P) from said bulletin board apparatus, and 
calculates and sends (HS w RAw ) RBw (mod P) to said bulletin board apparatus; 
20 and a step wherein said bulletin board apparatus: makes public and compares 
said (HSw^Y^mod P) and (HT^^mod P) received from said first 
and second quantitative competition apparatuses; decides the presence or 
absence of a user having selected his intended value equal to or smaller than 
said value V w , depending on whether said (HS w RAw ) RBw (mod P) and 
25 (HT w Mw )^ w (mod P) differ or equal; and determines said minimum intended 
value V M in by changing said value w based on said decision. 

5. The method of claim 3 or 4, wherein: letting w m i n and w max 
represent variables, said first and second quantitative competition apparatuses 
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have said value w in common as the maximum integer equal to or smaller 
than ( w min + w max )/2=( 1 +M)/2 where w min =l and w max =M; and 

said Step (d) includes a step wherein: w is substituted for said variable 
w max or w+1 is substituted for said variable w min , depending on the presence or 
5 absence of a user having selected his intended value equal to or smaller than 
said value V w ; said Steps (b) and (c) are repeated until w max : ^ m j n =MIN to 
obtain said minimum intended value V M in corresponding to said value MIN; 
L L and upon each repetition of said Steps (b) and (c), said bulletin board 
'% apparatus makes public the results of calculation. 

J2 1 0 6, The method of claim 4, wherein each element of said M-element 

sequences of information s\ and t\ is a one-bit element. 
N 1 7. The method of claim 4 or 6, said step (e) further comprising a step 

O wherein said first and second quantitative competition apparatus send said 
U bulletin board apparatus random numbers RA M in and RB M in and make them 
g 15 public. 

8. The method of any one of claims 1 to 4, wherein: L quantitative 
competition apparatuses are provided, said L being equal to or larger than 3; 

said Step (a) includes a step wherein when supplied with said value 
V vi , said each user apparatus generates L sequences of information s ik , where 
20 k=l ,2, . . . , L, said L sequences of information s ik being such that they are 

equal in all pieces of information corresponding to values equal to or greater 
than Vi and equal to or smaller than V vi but different in all pieces of 
information corresponding to values equal to or larger than V vi and equal to or 
smaller than V M and such that said value V vi can be detected when at least two 
25 sequences s ia and s ib of said L sequences of information s ik are known, where 
a^b; and said each user apparatus sends said L sequences of information s ik to 
a k-th quantitative competition apparatus; and 

wherein two of said L quantitative competition apparatuses conduct 
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quantitative competition, and when one of said two quantitative competition 
apparatuses goes down, another normal one of the remaining quantitative 
competition apparatuses is used to continue said quantitative competition. 
9. The method of claim 1, wherein said Step (a) includes a step 
5 wherein: said each user apparatus secretly sends seed values s\ and t'j as 
information corresponding to said two sequences of information S{ and t{ to 
said first and second quantitative competition apparatuses, respectively; 
letting vi represent the element number corresponding to said intended value 
O V vi , said seed values s'i and t'i are determined by a one-way function F so that 
K 1 0 F d (s'0= F d (t'0, where d=0,l, . . M-vi, and F e (s'0 = F e (t'0, where e= M-vi+1 , 
yi . . M-l ; and said two sequences of information S| and t { are given by the 
5 following equations 



I 15 tr{%i=F M -\t'd, ta=F M - 2 (t'i), . .., t^F^t'O, t i>vi =F M - vi (t'0, . .., 

*" t^M-^FO'i), t ijM = s'i}. 



Si,M-i = F(s'i), s isM =s 5 i} and 




I'M-vi+lr >; 



^ s i,vi F (s j), . . 



10. The method of claim 1, wherein said Step (a) includes: 



a step wherein said each user apparatus generates initial random 
numbers Rl i5 R2 i? ca i? cbi, s isM ->-i and t^M+iJ and 



20 



a step wherein said each user apparatus: sets an initial value of m at M, 
and performs, with respect to the element number vi corresponding to said 
intended value V vi , the following calculations 



25 





l (cbO) 
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s i ^=t i>m =h(s i , m _ 1 ||h M+l - m (ca i )||h M+1 - m (cb i )) 
to provide subsequences s i?m =t i?m ; and obtains sequences of said elements Si sm 
and ti ?m as said sequences of information Si and t,, and a value s ij0 for m=0; and 
wherein said Step (a) further includes: a step wherein said each user 
5 apparatus encrypts Rli and s^fs^, s is2 , . . s i?M } by an encryption function E A , 
sends the resulting E A (Si||Rli) to said first quantitative competition apparatus, 
encrypts R2j and ti={t i5 i, tj >2 , . . t ijM } by an encryption function E B , and sends 
, s the resulting E B (ti||R2i) to said second quantitative competition apparatus; and 
tj a step wherein said each user apparatus sends Hli=h(si||Rli), H2i=h(ti||R2i), s^o, 

1 0 h M+1 (cai) and h M+1 (cbi) to said bulletin board to make them public. 
Uj 1 1 . A quantitative competition method in which the maximum one 

H Vmax of all users' intended values V V i selected from among M monotone 
p increasing values V w , where w=l,2,. . M, in the range of predetermined 

U lower-limit and upper-limit values Vi and V M and only a user j having 
S 1 5 selected said maximum value Wmax as his intended value are specified by a 
1 y plurality of user apparatuses i, where i= 1 , . . . , N, said N being an integer equal 

to or larger than 2, first and second quantitative competition apparatuses, and 
a bulletin board apparatus that makes public information received from said 
plurality of user apparatuses and said first and second quantitative 
20 competition apparatuses, said method comprising: 

Step (a) wherein each of said user apparatuses i: responds to said 
intended value V vi input from one of said all users to generate two M-element 
sequences of information Si and t* whose corresponding elements equal at 
values in the range from said lower-limit value V] or larger to said intended 
25 value V v i or smaller and differ at values in the range from said intended value 
V vi or larger to said upper-limit value V M or smaller; and secretly sends 
information about said two M-element sequences of information s- x and ti to 
said first and second quantitative competition apparatuses, respectively, said 
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M representing the number of values selectable as said intended values in the 
range from said lower-limit value Vi or larger to said upper-limit value V M or 
smaller; 

Step (b) wherein said first quantitative competition apparatus: extracts, 
5 for a given value V w equal to or larger than said lower-limit value Vj and 
equal to or smaller than said upper-limit value, those elements Si yW of said 
M-element sequences of information sj sent from said all user apparatuses 
which correspond to w; and generates an element concatenation 
Seq SjW =si 9W ||s2 5 w|| . - -||sn,w in which said extracted elements Sj jW are arranged in a 
0 10 predetermined order, said || representing the concatenation of data; 
JS Step (c) wherein said second quantitative competition apparatus: 

L extracts, for said given value V w , those elements t i>w of said M-element 

u sequences of information ti sent from said all user apparatuses which 
m correspond to said value w; and generates an element concatenation 

hi 1 5 Seq t>w =ti sW ||t2 9 w|| ■ • -l|tN,w in which said extracted elements are arranged in a 
predetermined order; 

Step (d) wherein said bulletin board apparatus: compares said element 
concatenations Seq s>w and Seqt, w without revealing their values; decides the 
presence or absence of a user having selected his intended value equal to or 
20 larger than said value V w , depending on whether said concatenations Seq SjW 
and Seq tsW differ or equal; determines the maximum intended value Vmax by 
changing said value w based on said decision and makes the value MAX 
public; and 

Step (e) wherein said first and second quantitative competition 
25 apparatuses send element concatenations Seq SsMA x and Seq^MAX, respectively, 
to said bulletin board apparatus to make them public, whereby allowing each 
user to identify user j who committed the maximum intended value Vmax by 
finding j which satisfies s^max^max of the corresponding elements in said 
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element concatenations Seq s>M Ax and Seq t>M AX- 
12. The method of claim 11, wherein: 

said Step (a) includes: a step wherein said user apparatus of said each 
user i generates random numbers Rli and R2i secretly send a pair of 
5 information (Rl i? s^) to said first quantitative competition apparatus and a pair 
of information (R2 i? t{) to said second quantitative competition apparatus; and 
a step wherein said user apparatus calculates hash values Hli=h(Rli||Si) and 
H2i=h(R2i||ti) of concatenations Rli||Sj and R2i|jti of said pairs of information 
(Rib sO and (R2 i? tj) by a hash function h, and sends said hash values Hlj and 
ill 1 0 H2j to said bulletin board apparatus; and 

Ul said Step (d) includes a step wherein said bulletin board apparatus 

u makes public said hash values Hli and H2 i? where i=l,2, . . N, as 

Q commitments of said all users. 

[T 13. The method of claim 12, wherein: 

5 1 5 said Step (b) includes a step wherein said first quantitative competition 

W apparatus: calculates a hash value HS w =h(Seq S9W ) of said element 

concatenation Seq s>w by said hash function h; and sends said hash value HS W 
to said bulletin board apparatus; 

said Step (c) includes a step wherein said second quantitative 
20 competition apparatus: calculates a hash value HT w =h(Seq t w ) of said element 
concatenation Seq^w by said hash function h; and sends said hash value HT W 
to said bulletin board apparatus; and 

said Step (d) includes a step wherein said bulletin board apparatus: 
makes public and compares said hash values HS W and HT W received from said 
25 first and second quantitative competition apparatuses; decides the presence or 
absence of a user having selected his intended value equal to or larger than 
said value V w , depending on whether said hash values HS W and HT W differ or 
equal; and determines said maximum intended value Vmax by changing said 
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value w based on said decision. 

14. The method of claim 12, wherein: 

said first and second quantitative competition apparatuses have stored 
therein a prime P made public previously by said bulletin board apparatus, 
5 said prime P being a prime such that P-l has a large prime as its divisor, and 
said first and second quantitative competition apparatuses having selected a 
common integral value w; 

said Step (b) includes a step wherein said first quantitative competition 
O apparatus: calculates a hash value HS w =h'(Seq S)W ) of said element 
m 1 0 concatenation Seq s>w by a hash function h' that maps an arbitrary integer over 
m a finite field uniquely and randomly; generates a random number RA W ; 
2 calculates a hash value HA w =h(RA w ||HS w ) of a concatenation RA W (|HS W by 
JU said hash function h; calculates HS w RAw (mod P); and sends a pair (HA W , 

HS/^mod P)) of said hash value HA W and said value HS^Otnod P) to 
JJ 15 said bulletin board apparatus; 

fU said Step (c) includes a step wherein said second quantitative 

competition apparatus: calculates a hash value HT w =h'(Seq t3W ) of said element 
concatenation Seq tjW by a hash function h'; generates a random number RB W ; 
calculates a hash value HB w =h(RB w ||HT w ) of a concatenation RB W ||HT W by 

20 said hash function h; calculates HT w RBw (mod P); and sends a pair (HB W5 
HT w ^ w (mod P)) of said hash value HB W and said value HT^Cmod P) to 
said bulletin board apparatus; and 

said Step (d) includes: a step wherein said first quantitative 
competition apparatus reads said HT w ^ w (mod P) from said bulletin board 

25 apparatus, and calculates and sends (HT w ^ w )^ w (mod P) to said bulletin 
board apparatus; a step wherein said second quantitative competition 
apparatus reads said HSw^Onod P) from said bulletin board apparatus, and 
calculates and sends (HS w RAw ) RBw (mod P) to said bulletin board apparatus; 
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and a step wherein said bulletin board apparatus: makes public and compares 
said (HS w RAw ) RBw (mod P) and (HT/^^mod P) received from said first 
and second quantitative competition apparatuses; decides the presence or 
absence of a user having selected his intended value equal to or larger than 
5 said value V w , depending on whether said (HS/^^Cmod P) and 

(HT/^^mod P) differ or equal; and determines said maximum intended 
value Vmax by changing said value w based on said decision. 

15. The method of claim 13 or 14, wherein: letting w min and w max 
O represent variables of integers 1 to M, said first and second quantitative 
Ifl 10 competition apparatuses have said value w in common as the maximum 
m integer equal to or smaller than (w m i n +w max )/2=(l+M)/2 where w m \ n =\ and 
5 w max =M; and 

U said Step (d) includes a step wherein: w is substituted for said variable 

w max or w+1 is substituted for said variable w min , depending on the presence or 
2 15 absence of a user having selected his intended value equal to or larger than 
rU said value V w ; said Steps (b) and (c) are repeated until w max =w m i n =MAX to 

obtain said minimum intended value Vmax corresponding to said value MAX; 

and upon each repetition of said Steps (b) and (c), said bulletin board 

apparatus makes public the results of calculation. 
20 16. The method of claim 14, wherein each element of said M-element 

sequences of information Sj and tj is a one-bit element. 

17. The method of claim 14 or 16, said step (e) further comprising a 
step wherein said first and second quantitative competition apparatus send 
said bulletin board apparatus random numbers RA M in and RB M in> respectively, 

25 to make them public. 

18. The method of any one of claims 11 to 14, wherein: L quantitative 
competition apparatuses are provided, said L being equal to or larger than 3; 

said Step (a) includes a step wherein when supplied with said value 



V V j ? said each user apparatus generates L sequences of information Si k , where 
k=l ? 2, . . L, said L sequences of information S& being such that they are 
equal in all pieces of information corresponding to values equal to or greater 
than Vi and smaller than V vi but different in all pieces of information 
5 corresponding to values equal to or larger than V V j and equal to or smaller 
than V M and such that said value V vi can be detected when at least two 
sequences Sj a and s ib of said L sequences of information s ik are known, where 
a^b; and said each user apparatus sends said L sequences of information s ik to 
a k-th quantitative competition apparatus; and 
1 0 wherein two of said L quantitative competition apparatuses conduct 

quantitative competition, and when one of said two quantitative competition 
apparatuses goes down, another normal one of the remaining quantitative 
competition apparatuses is used to continue said quantitative competition. 

19. The method of claim 11, wherein said Step (a) includes a step 
15 wherein: said each user apparatus secretly sends seed values s\ and t'i as 

information corresponding to said two sequences of information Sj and U to 
said first and second quantitative competition apparatuses, respectively; 
letting vi represent the element number corresponding to said intended value 
V V i, said seed values s\ and t'i are determined by a one-way function F so that 
20 F d (s'i)= F d (t'0, where d=0,l, . . ., M-vi, and F e (s'0= F e (t'0, where e= M-vi+1, 
. . M-l ; and said two sequences of information s 2 - and tj are given by the 
following equations 

sr{s^¥ u -\s\) 9 s^F^s'O, s iM ^¥ u ~ Vl+ \s\\ Si , vi =F M - vi (s'i) 5 
Si,M-i=F(s'i), s i>M =s'i} and 
25 tr{ki=? U -\t'd, ti,2=F M - 2 (t'0, t lM ^¥ M -^\t\\ ti, vi =F M - vi (fi), 

ti,M-l = F(t'i), ti s M = s'i}. 

20. The method of claim 11, wherein said Step (a) includes: 

a step wherein said each user apparatus generates initial random 
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numbers Rlj, R2 i? ca i? cb i? s ijM +i andti 5M+ i; and 

a step wherein said each user apparatus: sets an initial value of m at M, 
and performs, with respect to the element number vi corresponding to said 
intended value V vi , the following calculations 
5 s^Ks^ and 

t ijm =h(^ 

sequentially for m=M, M-l, . . vi to provide subsequences s i?m ^t i5m ; 

calculates a sequence element for m=vi-l 
5 s i>m =t i)m =h(s i , m _ 1 i|t i5ni _ 1 ||h M+, - m (ca i )l|h M+1 - m (cb i )) 
111 1 0 and a sequence element for nF=vi-2, vi-3, . . ., 0 
| s i(m ^ i . m =h(s ifm _ 1 ||h MH - m (ca i )||h M - ,1 - m (cb i )) 

J to provide subsequences s ijin =ti ;m ; and obtains sequences of said elements s i;m 

U and t j;in as said sequences of information s ; and t i5 and a value s i>0 for m=0; and 

^ wherein said Step (a) further includes: a step wherein said each user 

2 1 5 apparatus encrypts Rlj and Si={sy , s i>2? . . s ijM } by an encryption function E A , 
sends the resulting E A (Sj||Rlj) to said first quantitative competition apparatus, 
encrypts R2j and tf={t u , \ 2 , . . t i>M } by an encryption function E B , and sends 
the resulting E B (ti||R2i) to said second quantitative competition apparatus; and 
a step wherein said each user apparatus sends Hli=h(Si||Rlj), H2i=h(ti||R2j), Sy), 
20 h M+1 (cai) and h M+1 (cbj) to said bulletin board to make them public. 

21. The method of claim 1 or 11, wherein said Step (a) includes a step 
wherein said each user apparatus: generates a random number ri; determines 
two pieces of random information aj and b i5 where ri=ai*bj, said symbol * 
being a predetermined common operator; sends said pieces of random 
25 information a; and b; to said first and second quantitative competition 

apparatuses, respectively; hashes said pieces of random information a { and b { 
by a hash function h; and sends hash values h(aO, h(bO and h(V V i||ri) to said 
bulletin board apparatus; and said Step (e) includes a step wherein said first 
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and second quantitative apparatuses send said pieces of random information a, 
and bj to said bulletin board apparatus to make them public, and said each 
user apparatus verifies said made-public hash values h(aj) and h(bj) by using 
said made-public random information aj and bj and further verifies whether 

5 KVvjllrOHiCVJafbj). 

22. A method by which said each user apparatus in said quantitative 
competition method of claim 1 registers his intended value V vi selected from 
among M integral values defined by upper and lower limits V M and Vi for 
comparison, said M being an integer equal to or larger than 2, said method 

10 comprising the steps of: 

(a) responding to the input of said intended value V vi to generate two 
M-element sequences of information s ; and ti whose corresponding elements 
equal at values in the range from said value Vi or larger to said value V vi or 
smaller and differ at values in the range from said value V vi or larger to said 

1 5 value V M or smaller; 

(b) responding to the input of said two M-element sequences of 
information s ; and U to calculate one-way functions for said sequences of 
information s s and t; and send calculation results Hli and H2j to a bulletin 
board apparatus; and 

20 (c) sending said sequence of information Sj to a first quantitative 

competition apparatus, said sequence of information ti to a second quantitative 
competition apparatus, and said HI; and H2; to said bulletin board apparatus. 

23. A method by which said each user apparatus in said quantitative 
competition method of claim 11 registers his intended value V vi selected from 

25 among M integral values defined by upper and lower limits V M and Vi for 
comparison, said M being an integer equal to or larger than 2, said method 
comprising the steps of: 

(a) responding to the input of said intended value V vi to generate two 
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M-element sequences of information Si and ti whose corresponding elements 
differ at values in the range from said value Vi or larger to said value V vi or 
smaller and equal at values in the range from a value V V i+i or larger to said 
value Vm or smaller; 
5 (b) responding to the input of said two M-element sequences of 

information s\ and tj to calculate one-way functions for said sequences of 
information Sj and ti and send calculation results Hlj and H2i to a bulletin 
board apparatus; and 

(c) sending said sequence of information Si to a first quantitative 
10 competition apparatus, said sequence of information ti to a second quantitative 
competition apparatus, and said Hli and H2j to said bulletin board apparatus. 

24. A user apparatus for use in said quantitative competition method of 
claim 1, comprising: 

a storage part having stored therein M integral values defined by upper 
1 5 and lower limits V M and Vi for comparison; 

input means for inputting an intended value V vi equal to or larger than 
said value Vi and equal to or smaller than said value V M ; 

a sequence-of-information generating part supplied with said values 
V v i, Vi and V M , for generating and outputting two M-element sequences of 
20 information Sj and ti whose corresponding elements equal at values in the 
range from said lower-limit value Vi or larger to said intended value V V i or 
smaller and differ at values in the range from said intended value V vi or larger 
to said upper-limit value V M or smaller, or two M-element sequences of 
information si and ti whose corresponding elements differ at values in the 
25 range from said lower-limit value Vi or larger to said intended value V vi or 
smaller and equal at values in the range from a value V V i+i or larger to said 
upper-limit value V M or smaller, said M being the number of values selectable 
as said intended value V vi equal to or larger than said value V x and equal to or 
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smaller than said value V M ; 

a one-way function calculating part supplied with said sequences of 
information s\ and t i? for calculating one-way functions for said sequences of 
information Sj and t { and for outputting calculation results HI; and HI,; and 
5 a transmitting part for sending said sequence of information Sj to a first 

quantitative competition apparatus, said sequence of information tj to a second 
quantitative competition apparatus, and said HI* and H2 { to a bulletin board 
M: apparatus. 

S 25. A user apparatus for use in said quantitative competition method of 

q 10 claim 11, comprising: 

? a storage part having stored therein M integral values defined by upper 

^ and lower limits V M and Vi for comparison, said M being an integer equal to 
P or larger than 2; 

N= input means for inputting an intended value V vi equal to or larger than 

Q 1 5 said value Vi and equal to or smaller than said value V M ; 

a sequence-of-information generating part supplied with said values 
V vi , Vi and V M , for generating and outputting two M-element sequences of 
information Sj and t ; whose corresponding elements differ at values in the 
range from said lower-limit value Vi or larger to said intended value V v j or 
20 smaller and equal at values in the range from a value V vi+ i or larger to said 
upper-limit value V M or smaller; 

a one-way function calculating part supplied with said sequences of 
information s } and t ; , for calculating one-way functions for said sequences of 
information Sj and t ; and for outputting calculation results Hlj and H2;; and 
25 a transmitting part for sending said sequence of information Sj to a first 

quantitative competition apparatus, said sequence of information tj to a second 
quantitative competition apparatus, and said Hli and H2; to a bulletin board 
apparatus. 
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26. A quantitative competition apparatus for use in a quantitative 
competition method of claim 1 or 11, comprising: 

a receiving part for receiving from each user apparatus a sequence of 
information consisting of elements of the same number M as that of values 
5 selectable as an intended value V vi in the range of between lower-limit and 
upper-limit values Vi and V M , and for receiving an integral value w from a 
bulletin board apparatus; 

a storage part for storing said sequence of information received from 
said each user apparatus; 
1 0 a one-way function calculating part supplied with w-th elements of 

said sequences of information received from users, for calculating and 
outputting one-way functions for concatenations of said w-th elements; and 
a transmitting part for sending said calculated one-way functions to 
said bulletin board apparatus. 
15 27. A competition method by a quantitative competition apparatus for 

use in said quantitative competition method of claim 1 or 11, said method 
comprising the steps of: 

(a) receiving, from each user apparatus i, where =1,2,. . ., N, an 
M-element sequence of information Sj={s u s i;2 , s i;M } as information 

20 representing an intended value V vi selected from among M values in the range 
of between lower-limit and upper-limit values Vi and V M ; 

(b) receiving an integral value w from a bulletin board apparatus; 

(c) inputting a w-th element s i;W of said sequence of information Sj 
received from said each user apparatus and calculating a one-way function for 

25 a concatenation of such input w-th elements S;, w ; and 

(d) sending said calculated one-way function to said bulletin board. 
28. A quantitative competition apparatus for use in said quantitative 

competition method of claim 1 or 11, said apparatus comprising: 
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a receiving part for receiving from each user apparatus a sequence of 
information consisting of elements of the same number M as that of values 
selectable as an intended value V v i in the range of between lower-limit and 
upper-limit values Vi and V M , and for receiving an integral value w from a 
5 bulletin board apparatus; 

a storage part for storing said sequence of information received from 
said each user apparatus; 

a one-way function calculating part supplied with w-th elements of 
O said sequences of information received from users, for calculating and 
in 10 outputting one-way functions for concatenations of said w-th elements; and 
m a transmitting part for sending said calculated one-way functions to 

_u said bulletin board apparatus. 

□ 29. A computer program for executing the procedure to be followed by 

[7 a user apparatus in a quantitative competition method of claim 1 or 1 1, said 

% 15 program comprising the steps of: 

m responding to an intended value V vi selected from among integral values 

defined by upper-limit and lower-limit values Vi and V M for comparison to 
generate two M-element sequences of information Si and X\ whose 
corresponding elements equal at values in the range from said lower-limit 

20 value Vi or larger to said intended value V vi or smaller and differ at values in 
the range from said intended value V vi or larger to said upper-limit value V M 
or smaller, or two M-element sequences of information sj and t { whose 
corresponding elements differ at values in the range from said lower-limit 
value Vi or larger to said intended value V vi or smaller and equal at values in 

25 the range from a value V vi+ i or larger to said upper-limit value V M or smaller, 
said M being the number of values selectable as said intended value V vi equal 
to or larger than said value Vi and equal to or smaller than said value V M ; 

calculating one-way functions for said sequences of information Si and 



tj and for outputting calculation results Hlj and H2 ; ; and 

sending said sequence of information Sj to a first quantitative 

competition apparatus, said sequence of information tj to a second quantitative 

competition apparatus, and said HI; and H2j to a bulletin board apparatus. 
30. A recording medium on which there is recorded said computer 

program of claim 29. 



